openproject/modules/backlogs/spec/controllers/versions_controller_spec.rb

#-- copyright
# OpenProject Backlogs Plugin
#
# Copyright (C)2013-2014 the OpenProject Foundation (OPF)
# Copyright (C)2011 Stephan Eckardt, Tim Felgentreff, Marnen Laibow-Koser, Sandro Munda
# Copyright (C)2010-2011 friflaj
# Copyright (C)2010 Maxime Guilbot, Andrew Vit, Joakim Kolsjö, ibussieres, Daniel Passos, Jason Vasquez, jpic, Emiliano Heyns
# Copyright (C)2009-2010 Mark Maglana
# Copyright (C)2009 Joe Heck, Nate Lowrie
#
# This program is free software; you can redistribute it and/or modify it under
# the terms of the GNU General Public License version 3.
#
# OpenProject Backlogs is a derivative work based on ChiliProject Backlogs.
# The copyright follows:
# Copyright (C) 2010-2011 - Emiliano Heyns, Mark Maglana, friflaj
# Copyright (C) 2011 - Jens Ulferts, Gregor Schmidt - Finn GmbH - Berlin, Germany
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
#
# See doc/COPYRIGHT.rdoc for more details.
#++

require 'spec_helper'

describe VersionsController, type: :controller do
  let(:version) do
    FactoryBot.create(:version,
                      sharing: 'system')
  end

  let(:other_project) do
    FactoryBot.create(:project).tap do |p|
      FactoryBot.create(:member,
                        user: current_user,
                        roles: [FactoryBot.create(:role, permissions: [:manage_versions])],
                        project: p)
    end
  end

  let(:current_user) do
    FactoryBot.create(:user,
                      member_in_project: version.project,
                      member_with_permissions: [:manage_versions])
  end

  before do
    # Create a version assigned to a project
    @oldVersionName = version.name
    @newVersionName = 'NewVersionName'

    # Create params to update version
    @params = {}
    @params[:id] = version.id
    @params[:version] = { name: @newVersionName }
  end

  before do
    login_as current_user
  end

  describe 'update' do
    it 'does not allow to update versions from different projects' do
      @params[:project_id] = other_project.id
      patch 'update', params: @params
      version.reload

      expect(response).to redirect_to controller: '/project_settings', action: 'show', tab: 'versions', id: other_project
      expect(version.name).to eq(@oldVersionName)
    end

    it 'allows to update versions from the version project' do
      @params[:project_id] = version.project.id
      patch 'update', params: @params
      version.reload

      expect(response).to redirect_to controller: '/project_settings', action: 'show', tab: 'versions', id: version.project
      expect(version.name).to eq(@newVersionName)
    end
  end
end